home

bethesdanetlauncher_setup.exe

Bethesda.net Launcher

Zenimax Media Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.google.com and multiple other hosts.
Publisher:
Bethesda Softworks   (signed by Zenimax Media Inc.)

Product:
Bethesda.net Launcher

Description:
Bethesda.net Launcher Setup

MD5:
e1fd2500ddf1df5d34564f5f91b91c83

SHA-1:
22326760f487ebc28013003a42b8e27471f9ce4e

SHA-256:
4530efb294512cc1a9aa3b9caa26588866d254d9923a0c3a72010697c8ab5fcd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/20/2024 5:21:20 AM UTC  (today)

File size:
12.3 MB (12,895,592 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Zenimax Media Inc.

Authority:
thawte, Inc.

Valid from:
12/2/2015 6:00:00 PM

Valid to:
1/3/2017 5:59:59 PM

Subject:
CN=Zenimax Media Inc., OU=Zenimax Online Studios, O=Zenimax Media Inc., L=Rockville, S=Maryland, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5703A83169AFEF8304E753B714065E6A

File PE Metadata
Compilation timestamp:
7/9/2014 2:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:MhWVMQtarIXV7b5tMrmFSI+hKxGwCNdinA9Ous8lsEO+R3H6lbfq7Vxwl6lc:fVMF0Xx5ts5KxG/9OyX3aqqmc

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9949

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file bethesdanetlauncher_setup.exe has been seen being distributed by the following 50 URLs.

https://www.google.com/url?hl=en&q=http://.../?qs=ec8dbad22034901ed697a6c908c44a1ef8a7413e441a20bec503a2b811f740ca&source=gmail&ust=1470244725837000&usg=AFQjCNFP1hsfKXZCJhXJ9V0ZSfxf7PznKQ

https://www.google.com/url?hl=en&q=http://.../?qs=3bef5d1a134a2c9f622b9cf0a6428c1947ef2293965c4c0494bfa6f6ec0a768f&source=gmail&ust=1470957774578000&usg=AFQjCNH5BJ4sBgt7GpbNxjg8jwXaxoOELg

https://www.google.com/url?hl=en&q=http://.../?qs=3bef5d1a134a2c9f5bcd7828fb9d96a5cbfa9354b41694ac048848de8dec76ff&source=gmail&ust=1470010897570000&usg=AFQjCNFs9yJ8zLn_BDseJ8mYDntT3UnEpg

https://www.google.com/url?hl=en&q=http://.../?qs=1cb62e50c86ec99b96e3bd161bee50c69d0ae02daf7de7a58e5597827b853614&source=gmail&ust=1471225212350000&usg=AFQjCNGdprMuArUptezUzyYQdgvUTAbedw

http://click.mailer.elderscrollsonline.com/?qs=cb8a46603a1898e57b750bfaea3494b16e6d6d17263cba6dafbcebc9b44e873d

https://www.google.com/url?hl=en&q=http://.../?qs=eb744b496aa1fdf060c8dca35fc63c334a302215f74a167a487a8c7c18b1760f&source=gmail&ust=1470256676518000&usg=AFQjCNFZ-XIA8nj7h3FhDoBgBaSwbMhTXQ

https://www.google.com/url?hl=en-GB&q=http://.../?qs=2ddcdec83f9b2c27c7cce0ba3284816ae90850925b7f82e3ab128843a51e402f&source=gmail&ust=1470256708454000&usg=AFQjCNGFKECqjH8PJM-vpeWb94w3pL8jYQ

https://www.google.com/url?hl=en&q=http://.../?qs=3e5e3e7f989cdd22398d2b1123a9e2f4bacf6950642168811570ed51ad5fdbb7&source=gmail&ust=1469753919432000&usg=AFQjCNFQSuCsug3V_k34RuspBdGPZ-9gGw

http://click.mailer.elderscrollsonline.com/?qs=01b4eaa303df211d80fabf288842d0cbf9086dcd5b11ebd6db1eb0655da7f940

https://www.google.com/url?hl=en&q=http://.../?qs=9d380580601507a345c9c5de7aaa4ce17f2ef03ef856923a05a932a05181d4b8&source=gmail&ust=1470244947298000&usg=AFQjCNGX9pkHH57N7mJyPE9mDawbSu9lYg

https://www.google.com/url?hl=pt-BR&q=http://.../?qs=e82330b52709912cb31554ea368c439df0b1d194a2cde5cfef9a55f75b2b49f1&source=gmail&ust=1470180439430000&usg=AFQjCNHfnZA-iuL4HbUWWVc3fKekAGmYvA

http://click.mailer.elderscrollsonline.com/?qs=118eb7336bc598b0af2775144c9715d405bf98bb6086e8efe6fd4fad41d95bc9

http://click.mailer.elderscrollsonline.com/?qs=39c96f2ef8dcb327f21e10054a71bdd1736a4af3a43e747ddde966847d98cd41

http://click.mailer.elderscrollsonline.com/?qs=59fd8375e24510a1c0c914da73674bc592fbd8724ecadc6092572151196fb4e5

https://www.google.com/url?hl=es&q=http://.../?qs=be1b77480be0d8dfc0742265310fc0e5eb2a17371149be6d4aa8466dfd3371ac6a255768a7cc1eb6&source=gmail&ust=1467063018024000&usg=AFQjCNGk0OZl0WHP2ZVoXuQr-DXcl1UhxQ

https://www.google.com/url?hl=en&q=http://.../?qs=30f88a3cf0cddc529d505e0f89fb8cf62dbc9a64768a13ea0a8cbe76e35b1f68&source=gmail&ust=1463878277060000&usg=AFQjCNE7pV7gMB2M7EDNCX-_kOsB9o7tDA

http://click.mailer.elderscrollsonline.com/?qs=59fd8375e24510a15875ba8c6229aebc8cd4c6184bd85cc2558ca793d538a79f

https://www.google.com/url?hl=en&q=http://.../?qs=9d380580601507a368f9daa561a13b069fb477971cf2b22c5f918879add1606d&source=gmail&ust=1469814504617000&usg=AFQjCNEHK4WjOPQezX85nS67Fmg3-ntuZg

https://www.google.com/url?hl=en&q=http://.../?qs=2e97fde1d9274d95015222787670751f141ee572f3bb48d9b3a83b3059d05da9&source=gmail&ust=1470451771671000&usg=AFQjCNGphVVLCb2wlIKo48ZaAx7YmIZr6A

http://click.mailer.elderscrollsonline.com/?qs=1cb62e50c86ec99b6f16fabf9bf39a5fc3e2cf930e08b0387c37554a2d5c8142

http://click.mailer.elderscrollsonline.com/?qs=3bef5d1a134a2c9f5bdcfbdaf9a2b2ec6e4d6e37eca0c4d479e06d5df751a29f

https://www.google.com/url?hl=en&q=http://.../?qs=3e5e3e7f989cdd22b07a58667d8ff989fdcd401a77e4c851792ede44c7bcc4c0&source=gmail&ust=1470384000584000&usg=AFQjCNFTElG9uShLBIfZoAYmTSck1dKcEQ

http://click.mailer.elderscrollsonline.com/?qs=59fd8375e24510a166e0e6fa0c24d7b33b93ea9dff01498e9cea05db478357e0

https://www.google.com/url?hl=en-GB&q=http://.../?qs=9bfcbe31e9ed010bf655abc0643f834f16f28ad136ccd4a5bc567c9e5f89a41b&source=gmail&ust=1469200761581000&usg=AFQjCNFlr0JVTdkteidoRNz7bLmKjJptfA

https://www.google.com/url?hl=en&q=http://.../?qs=c333b4136afb6b850134cd8ab659af74dfe9b51b9c01b5bf0635c33f9580e8c7&source=gmail&ust=1470515794196000&usg=AFQjCNFmINdUXZDBXIQrIS5dZJ-3AJ6C8A

https://www.google.com/url?hl=en&q=http://.../?qs=8df488a829dd2dfa9dc9880b4fe633a3d7334303e339f455860eb392ff268150&source=gmail&ust=1470206250235000&usg=AFQjCNEH-XEO4_71Nj6JrY37pl8Q6456ZQ

http://click.mailer.elderscrollsonline.com/?qs=7917897c8ddf292bdd49bf8b34d6e738e62ca2233677b32bbd660d0da2decc48

https://www.google.com/url?hl=en&q=http://.../?qs=c333b4136afb6b85ae34156c18e71e0987bd9f5cc610c595fcbe3e732cb8d9c3&source=gmail&ust=1469822252180000&usg=AFQjCNEEhPP5RgH34NoIrevy3-Xupn3TJw

https://www.google.com/url?hl=en&q=http://.../?qs=500dc421c89728f15bb9237b7d0a4cb4e35ec8b1e7f718eef89c170e560955cf&source=gmail&ust=1470330772279000&usg=AFQjCNF5CNEnJYeOdp4Hptvx5AC-43CnqQ

https://www.google.com/url?hl=en&q=http://.../?qs=82ef4e9cf25f7e195345217840a6086c79824654d85305a38e2f41539a5fbfa4&source=gmail&ust=1471551471668000&usg=AFQjCNHUeSG0na1qlr7MKc2dHsm_tjYxvg

Latest 30 of 84 download URLs

Scan bethesdanetlauncher_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.